Governance Risk Compliance
Система контроля
A structured set of governance, risk, and compliance (GRC) policies, processes, and controls aligned to industry standards for managing and mitigating organizational risks.
Quick answer: A structured set of governance, risk, and compliance (GRC) policies, processes, and controls aligned to industry standards for managing and mitigating organizational risks.
This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.
Definition
A structured set of governance, risk, and compliance (GRC) policies, processes, and controls aligned to industry standards for managing and mitigating organizational risks.
Operational example
Our organization implemented a NIST-based control framework to meet compliance requirements and manage cyber risk holistically.
Localized term
Система контроля
Localized example
Наша организация внедрила систему контроля на основе NIST для соблюдения требований соответствия и комплексного управления киберрисками.
Definition language
English reference definition
Source
ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK
Exam relevance
- CISSP
- CompTIA Security+
- CEH
Target audience
- SOC Analysts
- Security Engineers
- Incident Responders
